Malicious attackers are currently spamvertising malicious attachments impersonating Facebook's Support Team. Upon execution the sample Mal/Zbot-AV drops additional malware.
Sample subjects: "Facebook. Your password has been changed! [NUMBER]" "Facebook. The new password to your account. [NUMBER]" "Facebook Support. Personal data has been changed! [NUMBER]"
Sample message: Dear user of FaceBook. Your password is not safe! To secure your account the password has been changed automatically. Attached document contains a new password to your account and detailed information about new security measures.
Thank you for attention, Administration of Facebook.
Users are advised to avoid interacting with suspicious attachments.
See also:
- Spamvertised "Reqest Rejected" campaign leads to scareware
- Spamvertised Post Office Express Mail (USPS) emails lead to malware
- Spamvertised DHL notifications lead to malware
Join Discussion